Host mozilla.debian.net lacks proper SSL\TLS certificate

[Peter Palfrader]

On Sat, 27 Aug 2016, Mike Hommey wrote:

> On Sat, Aug 27, 2016 at 01:13:05PM +0500, Alexander V. Makartsev wrote:
> > I don't know if this is right place to send report, but it would be
> > nice to fix this problem.  I have successfully updated my apt source
> > lists to https for quite some time, and it looks like host debian.net
> > lacks proper SSL\TLS certificate.
> > 
> > apt-get output: ================= Err https://mozilla.debian.net
> > jessie-backports/firefox-release amd64 Packages SSL: certificate
> > subject name (debian.org) does not match target host name
> > 'mozilla.debian.net' Err https://mozilla.debian.net
> > jessie-backports/firefox-release i386 Packages  SSL: certificate
> > subject name (debian.org) does not match target host name
> > 'mozilla.debian.net' Ign https://mozilla.debian.net
> > jessie-backports/firefox-release Translation-en_US Ign
> > https://mozilla.debian.net jessie-backports/firefox-release
> > Translation-en Fetched 494 kB in 11s (44,3 kB/s)
> > W: Failed to fetch
> > https://mozilla.debian.net/dists/jessie-backports/firefox-release/binary-amd64/Packages
> > SSL: certificate subject name (debian.org) does not match target host
> > name 'mozilla.debian.net'
> > 
> > W: Failed to fetch
> > https://mozilla.debian.net/dists/jessie-backports/firefox-release/binary-i386/Packages
> > SSL: certificate subject name (debian.org) does not match target host
> > name 'mozilla.debian.net'
> > 
> > E: Some index files failed to download. They have been ignored, or old
> > ones used instead.  =================
> 
> mozilla.debian.net, like many other sites, is hosted on some sort of
> debian CDN, and that CDN doesn't have a setup, AFAIK, that allows for
> SSL virtual hosting. Debian admins, do you know if there's anything that
> can be done here? (at least, it might be better to just not listen on
> the HTTPS port for those virtual hosts)

You can't just write https instead of http and expect things to work.
Not listening on the https port is often not reasonable.

That being said, mozilla.debian.net now does support https.

Cheers,
-- 
                            |  .''`.       ** Debian **
      Peter Palfrader       | : :' :      The  universal
 https://www.palfrader.org/ | `. `'      Operating System
                            |   `-    https://www.debian.org/